CN104917660A - VLAN (virtual local area network) service division network - Google Patents
VLAN (virtual local area network) service division network Download PDFInfo
- Publication number
- CN104917660A CN104917660A CN201510352638.6A CN201510352638A CN104917660A CN 104917660 A CN104917660 A CN 104917660A CN 201510352638 A CN201510352638 A CN 201510352638A CN 104917660 A CN104917660 A CN 104917660A
- Authority
- CN
- China
- Prior art keywords
- vlan
- network
- switch
- terminal
- access
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L12/00—Data switching networks
- H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
- H04L12/46—Interconnection of networks
- H04L12/4641—Virtual LANs, VLANs, e.g. virtual private networks [VPN]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L12/00—Data switching networks
- H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
- H04L12/46—Interconnection of networks
- H04L12/4604—LAN interconnection over a backbone network, e.g. Internet, Frame Relay
- H04L12/4616—LAN interconnection over a LAN backbone
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L12/00—Data switching networks
- H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
- H04L12/46—Interconnection of networks
- H04L12/4604—LAN interconnection over a backbone network, e.g. Internet, Frame Relay
- H04L2012/4629—LAN interconnection over a backbone network, e.g. Internet, Frame Relay using multilayer switching, e.g. layer 3 switching
Abstract
The invention relates to the field of internet technologies, and particularly relates to a VLAN (virtual local area network) service division network. The VLAN service division network comprises an Internet service VLAN network and an internal service VLAN network, wherein the Internet service VLAN network is connected to a VLAN access switch by an access terminal, the VLAN access switch is connected to a first core switch, the first core switch distributes a DHCP (dynamic host configuration protocol), and is routed to an outlet gateway and connected to the Internet; the internal service VLAN network is connected to the access switch through an internal access terminal, the access switch is connected to a convergence switch, the convergence switch is connected to a second core switch, the DHCP is distributed by the second core switch, and the second core switch is connected to a service server. According to the invention, DHCP addresses are distributed by the core switches, thereby ensuring the safety of service division and reasonable distribution of flow.
Description
Technical field
The present invention relates to Internet technical field, be specifically related to a kind of VLAN traffic and divide network.
Background technology
Along with the development of internet information, the utilization of VLAN traffic is also original more extensive, in order to ensure the safety of business, in the terminal that the system access that Access Layer is different is different, ensures that the physical isolation of access side to obtain.Its division of existing VLAN traffic provides traffic identification and user to organize division by VLAN ID, but the conflict that still can cause service traffics to egress gateways between its security performance and user's group.
Summary of the invention
In order to solve the problems of the technologies described above, the invention provides a kind of VLAN traffic and dividing network, by the VLAN of business is ended in core switch, and distributing dhcp address by core switch, ensure the fail safe of delineation of activities and the reasonable distribution of flow.
In order to achieve the above object, the technical solution adopted in the present invention is, a kind of VLAN traffic divides network, comprise Internet service VLAN network and interior business vlan network, described Internet service VLAN network connects VLAN access switch by accessing terminal, VLAN access switch connects the first core switch, distributes DHCP by core switch, and routes to egress gateways and be connected to Internet the Internet; Described interior business vlan network to be accessed terminal connection access switch by inside, and access switch connects convergence switch, and convergence switch connects the second core switch, distributes DHCP by the second core switch, and core switch connects service server.
Further, access terminal described in and comprise wireless access terminal and access in radio terminal.
Further, described inside accesses terminal and comprises video conference terminal, IP phone, information release terminal, mobile office terminal and IPTV terminal.
Further, also comprise webmaster and AC controlled in wireless message VLAN, this webmaster and AC controlled in wireless message can be distributed on interior business vlan network, also can independently divide another vlan network.
The present invention is by adopting technique scheme, compared with prior art, tool has the following advantages: vlan network is divided into Internet service VLAN network and interior business vlan network by the present invention, VLAN ends in core switch, and carry out DHCP distribution by core switch, exchanging visit demand between different business, carries out three layers of route by core switch.Webmaster and AC controlled in wireless message can be distributed on inner VLAN, also can independently divide another VLAN.
Accompanying drawing explanation
Fig. 1 is the structural representation of embodiments of the invention.
Embodiment
Now the present invention is further described with embodiment by reference to the accompanying drawings.
As a specific embodiment, as shown in Figure 1, a kind of VLAN traffic divides network, comprise Internet service VLAN network and interior business vlan network, described Internet service VLAN network is by the 1 connection VLAN access switch 2 that accesses terminal, VLAN access switch 2 connects core switch 3, distributes DHCP by core switch 3, and routes to egress gateways 4 and be connected to Internet the Internet 5; Described interior business vlan network to be accessed terminal 6 connection access switch 7 by inside, and access switch 7 connects convergence switch 8, and convergence switch 8 connects core switch 9, distributes DHCP by core switch 9, and core switch 9 connects service server 10.
Core switch 3 and core switch 7 can be same exchange hardware or mutually redundant two exchange hardwares.
In the present embodiment, described in access terminal and comprise wireless access terminal and access in radio terminal.
In the present embodiment, described inside accesses terminal and comprises video conference terminal, IP phone, information release terminal, mobile office terminal and IPTV terminal.Described service server 10 comprises flow monitoring central server, media server and voice server.
In the present embodiment, also comprise webmaster and AC controlled in wireless message VLAN, this webmaster and AC controlled in wireless message can be distributed on interior business vlan network, also can independently divide another vlan network.
Although specifically show in conjunction with preferred embodiment and describe the present invention; but those skilled in the art should be understood that; not departing from the spirit and scope of the present invention that appended claims limits; can make a variety of changes the present invention in the form and details, be protection scope of the present invention.
Claims (5)
1. a VLAN traffic divides network, it is characterized in that: comprise Internet service VLAN network and interior business vlan network, described Internet service VLAN network connects VLAN access switch by accessing terminal, VLAN access switch connects the first core switch, distribute DHCP by core switch, and route to egress gateways and be connected to Internet the Internet; Described interior business vlan network to be accessed terminal connection access switch by inside, and access switch connects convergence switch, and convergence switch connects the second core switch, distributes DHCP by the second core switch, and core switch connects service server.
2. a kind of VLAN traffic according to claim 1 divides network, it is characterized in that: described in access terminal and comprise wireless access terminal and access in radio terminal.
3. a kind of VLAN traffic according to claim 1 divides network, it is characterized in that: described in access terminal and comprise wireless access terminal and access in radio terminal.
4. a kind of VLAN traffic according to claim 2 divides network, it is characterized in that: described inside accesses terminal and comprises video conference terminal, IP phone, information release terminal, mobile office terminal and IPTV terminal.
5. a kind of VLAN traffic according to claim 1 divides network, it is characterized in that: also comprise webmaster and AC controlled in wireless message VLAN, this webmaster and AC controlled in wireless message can be distributed on interior business vlan network, also can independently divide another vlan network.
Priority Applications (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201510352638.6A CN104917660A (en) | 2015-06-24 | 2015-06-24 | VLAN (virtual local area network) service division network |
CN201610037092.XA CN105610674A (en) | 2015-06-24 | 2016-01-20 | VLAN business dividing network |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201510352638.6A CN104917660A (en) | 2015-06-24 | 2015-06-24 | VLAN (virtual local area network) service division network |
Publications (1)
Publication Number | Publication Date |
---|---|
CN104917660A true CN104917660A (en) | 2015-09-16 |
Family
ID=54086387
Family Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201510352638.6A Pending CN104917660A (en) | 2015-06-24 | 2015-06-24 | VLAN (virtual local area network) service division network |
CN201610037092.XA Pending CN105610674A (en) | 2015-06-24 | 2016-01-20 | VLAN business dividing network |
Family Applications After (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201610037092.XA Pending CN105610674A (en) | 2015-06-24 | 2016-01-20 | VLAN business dividing network |
Country Status (1)
Country | Link |
---|---|
CN (2) | CN104917660A (en) |
Cited By (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN105704421A (en) * | 2016-03-16 | 2016-06-22 | 国网山东省电力公司信息通信公司 | Video conference main and parallel session networking architecture and method |
CN109101789A (en) * | 2018-06-28 | 2018-12-28 | 中译语通科技股份有限公司 | A kind of data safety control method |
CN109547267A (en) * | 2019-01-02 | 2019-03-29 | 京东方科技集团股份有限公司 | LAN system and core layer, access-layer switch and its configuration method |
Family Cites Families (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP2007074209A (en) * | 2005-09-06 | 2007-03-22 | Ntt Data Corp | Authentication vlan system, authentication server, and program |
CN101035012B (en) * | 2006-03-09 | 2011-06-22 | 上海博达数据通信有限公司 | Ethernet multi-layer switcher secure protection method based on DHCP and IP |
US8064458B2 (en) * | 2009-06-23 | 2011-11-22 | Nortel Networks Limited | Method and apparatus for simulating IP multinetting |
CN101841451B (en) * | 2009-12-30 | 2013-01-02 | 北京世纪互联宽带数据中心有限公司 | Virtual local area network-based speed limiting method and system for cloud hosts |
CN202696647U (en) * | 2012-04-06 | 2013-01-23 | 中国科学院上海应用物理研究所 | Control system network architecture |
-
2015
- 2015-06-24 CN CN201510352638.6A patent/CN104917660A/en active Pending
-
2016
- 2016-01-20 CN CN201610037092.XA patent/CN105610674A/en active Pending
Cited By (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN105704421A (en) * | 2016-03-16 | 2016-06-22 | 国网山东省电力公司信息通信公司 | Video conference main and parallel session networking architecture and method |
CN105704421B (en) * | 2016-03-16 | 2019-01-01 | 国网山东省电力公司信息通信公司 | A kind of main sub-venue group network system of video conference and method |
CN109101789A (en) * | 2018-06-28 | 2018-12-28 | 中译语通科技股份有限公司 | A kind of data safety control method |
CN109547267A (en) * | 2019-01-02 | 2019-03-29 | 京东方科技集团股份有限公司 | LAN system and core layer, access-layer switch and its configuration method |
Also Published As
Publication number | Publication date |
---|---|
CN105610674A (en) | 2016-05-25 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN102025591B (en) | Method and system for implementing virtual private network | |
EP2590369B1 (en) | Method and device for connecting to virtual private network across domains | |
CN109586972B (en) | Access method and system of user terminal equipment and broadband network gateway | |
CN102801599A (en) | Communication method and system | |
CN102025589A (en) | Method and system for realizing virtual private network | |
EP2901630B1 (en) | Method operating in a fixed access network and user equipments | |
CN104780088A (en) | Service message transmission method and equipment | |
CN105453523A (en) | Handling of virtual machine mobility in large data center | |
CN107666419B (en) | Virtual broadband access method, controller and system | |
CN101841451A (en) | Virtual local area network-based speed limiting method and system for cloud hosts | |
CN113852976A (en) | Data processing method, controller and forwarding equipment | |
CN104917660A (en) | VLAN (virtual local area network) service division network | |
CN109688241A (en) | IPv4/IPv6 dual stack conversion method and system based on SDN | |
CN104734930B (en) | Method and device for realizing access of Virtual Local Area Network (VLAN) to Variable Frequency (VF) network and Fiber Channel Frequency (FCF) | |
CN108234270B (en) | Method and system for realizing multi-domain coexistence of virtual extensible local area network | |
CN102780701B (en) | Access control method and equipment | |
CN113381936A (en) | Network information processing method and device and network equipment | |
CN108011802B (en) | Message sending method and two-layer and three-layer network equipment | |
CN102571592B (en) | There is three-layer switching equipment and the data message forwarding method of port binding function | |
CN204669386U (en) | VLAN traffic dividing system | |
CN105847143A (en) | VRRP (virtual router redundancy protocol)-based load balancing method and system | |
CN103001890B (en) | A kind of method for network access control | |
CN103582068A (en) | Wireless accessing method and system | |
JP2014505387A (en) | ID / locator separation network monitoring method and system | |
CN103095507B (en) | Based on message transmitting method and the edge device of Ethernet virtualization internet network |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
C06 | Publication | ||
PB01 | Publication | ||
C02 | Deemed withdrawal of patent application after publication (patent law 2001) | ||
WD01 | Invention patent application deemed withdrawn after publication |
Application publication date: 20150916 |